2010/3/25 Dianne Hackborn <[email protected]>: > On Thu, Mar 25, 2010 at 12:34 AM, Yi-Hau Li <[email protected]> wrote: >> >> Before i have the same question as Sveta, but after some study for >> current antivirus tool on Market, >> I observed that it is still able to scan or detect suspicious >> app/events to some extend, for instance: >> once a package was installed, scan its contents and warn the owner if >> necessary. (/data/app is world-readable) > > Note that all the app needs to do is have itself installed as forward-locked > and no other app will be able to access its code. (Its real .apk will be > installed in another directory, which is only accessible by the app.) >
yeah, you're correct. for those cases i can only think of two ways to do "minor" scan. (in cache directory where *classes.dex exists, or simply query pm) >> >> Though this may not be as powerful as PC-counterpart, it still >> provides some protection to users. FYI. > > Until someone actually discovers an Android virus, I would still question > the utility of a virus scanner. though no real virus was found, I noticed that there are spyware/adware on Market. users may find them annoying or unwanted. Aaron > -- > Dianne Hackborn > Android framework engineer > [email protected] > > Note: please don't send private questions to me, as I don't have time to > provide private support, and so won't reply to such e-mails. All such > questions should be posted on public forums, where I and others can see and > answer them. > > To unsubscribe from this group, send email to > android-security-discuss+unsubscribegooglegroups.com or reply to this email > with the words "REMOVE ME" as the subject. > To unsubscribe from this group, send email to android-security-discuss+unsubscribegooglegroups.com or reply to this email with the words "REMOVE ME" as the subject.
